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Abstract. Private quantum channels are the quantum analogue 
of the classical one-time pad. Conditional expectations and trace 
vectors are notions that have been part of operator algebra theory 
for several decades. We show that the theory of conditional expec- 
tations and trace vectors is intimately related to that of private 
quantum channels. Specifically we give a new geometric charac- 
terization of single qubit private quantum channels that relies on 
trace vectors. We further show that trace vectors completely de- 
scribe the private states for quantum channels that are themselves 
conditional expectations. We also discuss several examples. 



1. Introduction 

Private quantum channels are a basic tool in quantum cryptography 
pp. Conditional expectations and trace vectors are notions that have 
played a role in the theory of operator algebras for more than half a 
century [101 [H] • In this paper we show that there is an intimate rela- 
tionship between the two subjects. Specifically we give a new geometric 
characterization of single qubit private quantum channels via the Bloch 
sphere representation for qubit states that rehes on trace vectors. We 
further show that trace vectors completely describe the private states 
for quantum channels that are themselves conditional expectations. 

In the next two sections we introduce private quantum channels, con- 
ditional expectations, and trace vectors. We discuss basic properties 
and include simple examples of each. We then consider the single qubit 
case in detail, giving a trace vector characterization of private states 
for unital quantum channels. We finish with a complete characteriza- 
tion of the private states for channels that are themselves conditional 
expectations in terms of trace vectors. 
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2. Private Quantum Channels 

We will use 7{ or /C to denote Hilbert spaces (which are assumed to 
be finite dimensional in this paper) and denote a c?-dimensional Hilbert 
space by Tid- We denote the set of linear operators on Ti by C{T-L), and 
we use Wld to denote the algebra of dxd complex matrices, which when 
convenient will be regarded as the matrix representations of operators 
in C{l-Ld) with respect to a given orthonormal basis for Tid- The identity 
element of an operator space X will be denoted by Ix, or simply by 
1 if the space is implied by the context, and we will write for the 
identity of M^. 

We will use Dirac notation for vectors |0) and vector duals Thus 
pure states are represented as General quantum states are rep- 

resented by density operators (nonnegative operators with trace equal 
to 1), and we will use notation such as p, a in that case. The adjoint 
of an operator A will be written , and we will reserve the asterisk 
notation when discussing abstract C*-algebras. 

A quantum channel is a linear, completely positive, trace preserving 
map S : C{l-i) — )■ CiJC). (Channels are generally defined on the set 
of trace class operators, with their dual maps defined on the set of 
bounded operators, but the sets coincide in the finite dimensional case.) 
Every channel can be written as 

n 

(2.1) £{p) = Y,K,pK\. 

i=l 

for some operators Ki : ^ K, with Yl^=i — ^5 ^'^Y density 



operator p. We call a representation of £ as in equation (2.1) a Kraus 
decomposition of £. A channel £ is called a random unitary channel if 
it admits a decomposition 

(2.2) £{p) = Y,P^U^pUl Vp, 

i 

where {pi} form a probability distribution and Ui are unitary operators. 

In quantum cryptography, a private quantum channel (PQC) is the 
quantum analogue to the classical one-time pad. The following def- 
inition gives the mathematical framework for the notion in quantum 
information. 

Definition 2.1. Let 5 C be a set of pure states and let £ : C{l-i) -> 
C{l-i) be a channel. Let po be a density operator acting on 1-L. Then 
[5,£^,Po] is a private quantum channel (PQC) if for any state |0) G 5, 
we have 

£mm = po. 
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PQCs were first considered in pLj, where the authors consider a par- 
ticular class of random unitary channels. The most basic example is 
the following. 

Definition 2.2. A map £ : 53(7/2") 53(7/2") is called a depolarizing 
channel if, for any density matrix p G 58(7/2"), we have 

£(p) = ^l + (l-p)p, 
n 

where < p < 1 is a probability. When p = 1 the completely depolar- 
izing channel is obtained, which gives the simplest example of a PQC, 
where every pure state is a private state. We denote the completely 
depolarizing channel by E^.. 

3. Conditional Expectations and Trace Vectors 

We recall a basic definition from operator algebras. Suppose there 
exists an orthogonal direct sum decomposition of a Hilbert space as 
^ = 0j(^i ® Ni) ® Let A be an algebra of operators in £(7/) 
consisting of all operators that belong to the set A = 0j(llMi®'^(A'^j))© 
Ok, where Ok is the zero operator on K. We call A a (concrete finite 
dimensional) C* -algebra. A is unital if 1^ G A; i.e., /C is the zero 
subspace. A *-subalgebra S of ^ is a subset that is also a C*-algebra. 
See [1] for basic C*-algebra theory. 

Definition 3.1. Let ^ be a C*-algebra and let C ^ be a unital *- 
subalgebra. We call a linear map Sb '■ A B a conditional expectation 
of A onto B if 

(i) SB{b) = b for all b G B; 

(ii) £Bibiab2) = bi£B{a)b2 for all bi,b2 E B and for all a E A; 

(iii) a E A, a > implies Sb{(^) > 0. 

Conditional expectations were first considered in [10]. We are inter- 
ested in conditional expectations from M„ onto a subalgebra that are 
also quantum channels and hence trace preserving. We will therefore 
restrict ourselves to trace preserving conditional expectations. We will 
call such maps conditional expectation channels. 

More examples of conditional expectation channels will be discussed 
below, but for the reader familiar with quantum information, we note 
here that the n-qubit completely depolarizing channel Sc is the condi- 
tional expectation onto the trivial scalar algebra C ■ I2" . One way to see 
how conditional expectations inevitably arise in the theory is through 
trace inner products. 

Definition 3.2. A linear functional r : ^ — ^ C is a faithful trace if 
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(i) r(aia2) = r(a2ai) 

(ii) r(a^a) > for all a G ^ with a 7^ 0. 

Given a faithful trace r on ^ we can define an inner product (ai, 02) = 
T{a\a2)- We note that if A has a faithful trace r, the orthogonal projec- 
tion onto B with respect to this inner product is the unique r-preserving 
conditional expectation from A to B. The essential structure of this 
argument can be found in [IQl. The most well-known example is the 
so-called Hilbert-Schmidt inner product {A, B) = Tt{A^B) on Mn- 

3.1. Trace Vectors. We now consider trace vectors, a notion that 
initially arose in work of Murray and von Neumann [Ilj , and has more 
recently been studied in the field of matrix theory. 

Definition 3.3. Let .A be a *-subalgebra of A vector \v) is a 

trace vector of A if 

{v\a\v) = — Tr a Wa E A. 
n 

More generally, given a density operator po? we say \v) is a trace vector 
with respect to po of A if 

(3.1) {v\a\v) = Tr(poa) Va G A. 

Thus by "trace vector", we really mean "trace vector with respect to 

-In". 

By letting a = 1 in the definition of a trace vector, we find {v\v) = 1; 
a trace vector has unit length. It is easy to build a trace vector from 
other trace vectors in order to create a more general class of examples. 
Indeed, if \vi) is a trace vector of the algebra Ai = (Im^ ® jC^Ni)) © Ok 
for z G {1, . . . , q}, then |t>) = 0^=^ \vi) is a trace vector of the algebra 
A = Ai. In this way, trace vectors behave predictably. This also 
allows us to consider each summand separately, as we will do later. 

Example 3.4. As a fundamental example for quantum information, 
consider a maximally entangled state \(pe) G l-im®'Hn- That is, a state 
Iv^e) = -^Ya=i ® l/i)' where {|ei)} and form orthonormal 

sets in l-Lrn and l-Ln respectively, and d = min{m,n}. If m > n, then 
one can check via direct calculation that \(pe) is a trace vector for the 
algebra Im ® CiTin). And if m = n an analogous calculation works for 

The general case is clarified by the following theorem of the third 
author. We recall that a vector \v) is a separating vector of an algebra 
A if a\v) = for some a G A implies a = 0. 
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Theorem 3.5. If A is a unital *-subalgebra of Win, then the following 
conditions are equivalent: 

(1) A is unitarily equivalent to (1™.^ ® , where nii > 
for all i and X]i'=i '^i^j = 

(2) A has a separating vector. 

(3) A has a trace vector. 

(4) There exists a set of trace vectors of A that form an orthonormal 
basis o/C". 

This resuh is proved in [S]. A related infinite dimensional open 
problem goes all the way back to von Neumann [S] . Consider two simple 
cases. It is clear that M„ has no trace vectors - from both the theorem 
and the definition of trace vectors. On the other hand, let A2 be the 
algebra of 2 x 2 diagonal matrices with respect to a basis {|0), |1)}. 
One can readily check that the trace vectors for A2 are (up to complex 
phase) all vectors of the form lip) = ;^(|0) + e*^|l)), for < 6* < 2tt] in 
other words, the set of all states that lie on the equator in the Bloch 
sphere representation for qubits (this point is further elucidated in the 
next section). 

4. Private Quantum Channels on the Bloch Sphere 

In this section we give a geometric characterization of single qubit 
unital PQCs in terms of the Bloch sphere representation [8] for single 
qubit states. We also show how the private states for such PQCs are 
determined by trace vectors. An alternative description was discussed 
in [3], where the entropy of sets of such private states was considered. 

Every unital quantum channel is a random unitary channel in the 
single qubit case [7J. Thus, our private quantum channel [S,£,po] in 
this case is given by a random unitary channel S : M2 M2, a set 
of pure states S, and an output density matrix po- More precisely, we 
have S{\v){v\) = po for all \v) G S. We would like to allow for the 
possibility of orthonormal vectors in S. As the channel is unital this 
can only occur if po = ^1, and hence we shall focus on this case here. 

Using the Bloch sphere representation, we can associate to any den- 
sity matrix p G M2 a Bloch vector r G satisfying ||r|| < 1, where 

(4.1) P=^^- 

We use a to denote the Pauli vector, that is, a = (cr^, o"y, cr^)"^. Note 
that the set {l,ax,<Jy,o'z} forms a basis for the real vector space of 
Hermitian matrices in M2. We recall that a state is pure if and only if 
||r|| = 1 and that the maximally mixed state - has Bloch vector r = 0. 

II II -J n 
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As discussed in [6] , every linear map $ : M2 M2 can be represented 
in the basis {1, cTa;, a^, by a 4 x 4 matrix T, and $ preserves the 
trace if and only if the first row of the matrix T satisfies tik = Sik] i-e., 



(4.2) T 



1 

t T 



where T is a 3 x 3 matrix, is a row vector, and t is a column vector. 
The transformation $ maps the subspace of Hermitian matrices into 
itself ijf T is real; finally, the map $ is unital iff t = 0. 
Thus, every unital qubit channel S can be represented as 

(4.3) ^Q[l + r-a]) =^[l+(Tf).a], 

where T and t are real, and we recall any density matrix can be written 



as in equation (4.1). Here, the submatrix T represents a deformation 
of the Bloch sphere, while the vector t represents a translation. This 
affine mapping of the Bloch sphere into itself is also discussed in section 
8.3.2 of |H]. 

We are of course interested in cases where S is nonempty. This is 



easily seen to occur precisely when T in equation (4.3) has non-trivial 
nullspace. 

Thus we consider the cases in which T has non-trivial nullspace; 
that is, the subspace of vectors f such that Tf = is one, two, or 
three-dimensional. 

Finally, we note that in the single qubit case the unital subalgebras 
of the algebra A = M2 can be easily classified. They are M2, C- 12 (the 
two trivial cases), and, up to unitary conjugation, A2, the subalgebra 
of all diagonal matrices in M2. To be precise, this third case refers to 
the subalgebras B of the form WA2U, where U & A is unitary. 

Theorem 4.1. Let £ : M2 — > M2 he a unital qubit channel, with T 
the mapping induced by £ as in equation (^75). Then there are three 



possibilities for a private quantum channel [S,£, ^1] with S nonempty: 

(1) If the nullspace ofT is 1- dimensional, then S consists of a pair 
of orthonormal states. 

(2) // the nullspace ofT is 2- dimensional, then the set S is the set 
of all trace vectors of the subalgebra WA2U 0/ 2 x 2 diagonal 
matrices up to a unitary equivalence. 

(3) If the nullspace ofT is 3- dimensional, then £ is the completely 
depolarizing channel and S is the set of all unit vectors. In 
other words, S is the set of all trace vectors of C ■ I2. 
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Figure 1. Case (1) 



Proof. We shall write for the Bloch sphere vector representation of a 
single qubit state It is clear from equation (4.3) that = ^1 

if and only if Tr^ = 0. Hence the relevant set that yields private states 
here is the intersection of the nullspace of T and the surface of the 
Bloch sphere. 

Case (1): The nullspace of T is 1-dimensional. In this case, the 
nullspace is a single line through the origin of the Bloch sphere and 
the range of T is a plane through the origin. Obviously this line meets 
the surface of the Bloch sphere in two antipodal points. These two an- 
tipodal points correspond to a pair of orthonormal single qubit states. 
Figure 1 gives an example. 

Case (2): The nullspace of T is 2-dimensional. In this case, the 
nullspace is a plane through the origin of the Bloch sphere. This plane 
meets the surface of the sphere in a great circle. The pure states 
corresponding to the points on this circle are precisely the private states 
for the channel. See an illustration in Figure 2. 

To see how these private states arise from the trace vector perspec- 
tive, let us consider the action of the channel more directly. As the 
nullspace of T is 2-dimensional, its range is a line through the origin. 
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Figure 2. Case (2) 



For simplicity we shall assume this line is the 2;-axis; other cases are 
unitarily equivalent to this case. Thus, the range of T intersects the 
sphere in the north and south poles, corresponding to the pure states 
|0)(0| and |1)(1| respectively. The action of T here will be a possible 
rotation of the Bloch sphere followed by a projection of the sphere onto 
the z-axis, followed by a possible contraction. By unitary equivalence, 
we only need consider the case where there is no initial rotation of the 
Bloch sphere. In terms of the Pauli matrices Ox^Oy^Oz^ this means the 
action of the channel is given by £^(cr^) = 0, S{cry) = and S{az) = pCz 
for some < p < 1. 

Now A2 is the algebra of all diagonal matrices with respect to the 
ordered basis {|0), explicitly, A2 is the set of all operators of the 
form a|0)(0| + &|1)(1| for arbitrary scalars a,b. Then the projection 
onto the 2;-axis is a conditional expectation onto the subalgebra A2; 
call it £a- Explicitly, 

' b 
d ■ 





a b 




a 


0" 


( 


c d 


)- 





d 



One can check directly that S = 
completely depolarizing channel. 



, for any matrix 
p£a + (1 - P)£i 



where £c is the 
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As £<c adds no restrictions to the private states for it suffices to 
show that the trace vectors for A2 are precisely the pure states that 
he on the equator of the Bloch sphere. But the equator states are 
precisely the states that satisfy |(0||O)| = = |(0||1)|. And it is easy 
to see that these are the states which do indeed satisfy the trace vector 
condition for the algebra A2. 




Figure 3. Case (3) 

Case (3): The nullspace of T is 3-dimensional, in other words T is 
the zero operator. In this case T maps the entire Bloch sphere to its 
origin, which corresponds to the maximally mixed state ^1, as shown 
in Figure 3. It is clear in this case that S is the completely depolarizing 
channel Sc- Moreover, the set S has no restrictions; that is, S is the 
set of all unit vectors. In other words, S is the set of all trace vectors 
of C ■ I2. □ 

5. Private States for Conditional Expectation Channels 

The following result clarifies the general connection between condi- 
tional expectation channels, trace vectors and private states. 

Theorem 5.1. Let £ : M„ A he a conditional expectation channel. 
Then [iS,^,po] is a private quantum channel if and only if S is a set 
of trace vectors of A with respect to po G A. 
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Proof. Let us first assume that [S, S, po] is a PQC. Then £{\v) {v\) = po 
for all 1^;) G S, and in particular note that po belongs to A. Thus for 
all |f ) G iS and for all a G we have 

(f|a|f) = Tr(|t>)(t>|a) 

= TT{£{\v){v\a)) 

= Tr(^(|i;)(t;|)a) = Tr(poa), 

where the second and third identities follow from the trace preservation 
and conditional expectation properties of S respectively. It follows that 
the states of S are trace vectors of A with respect to po- 

For the converse, observe that when the vector states of S are trace 
vectors of A with respect to po, a similar calculation shows for all 
\v) G S and for all a G ^ that 

Tr(poa) = {v\a\v) 

= Tr(|f)(f|a) 

= Ti{S{\v){v\a)) =TT{S{\v){v\)a). 

As Po belongs to A, it follows that [S,S,po] forms a private quantum 
channel. □ 



Example 5.2. Of course the three cases of Theorem 4.1 when applied 



to a unital single qubit conditional expectation channel : M2 — > A 



are covered by this theorem. Indeed, applying Theorem 5.1 to and 
letting Po = |l yields [S, £j[, |l] is a PQC if and only if ^ = WA2U or 
A = C-l2 and iS is a set of trace vectors of A. Case 1 of Theorem |4.1| is 



an example of when iS is a proper subset of the set of all trace vectors 
of WA2U, whereas Case 2 occurs when S is the entire set. Case 3 
occurs when S is the set of all trace vectors of C ■ I2. 

Example 5.3. Conditional expectations arise as the most basic non- 
trivial examples of private quantum communication using a private 
shared Cartesian frame |2]. Let Ti = (C^)*^^, and for simplicity suppose 
N is even. Decompose the space as 

N/2 

(c')®^ = 0e,-®K,-, 

j=0 

where the special unitary group SU(2) acts irreducibly on M.j and triv- 
ially on Kj. As formulated in [2], if Alice and Bob share a reference 
frame to which Eve does not have access, and Alice prepares qubits 
in a state p and sends them to Bob, Eve will see the resulting state 
simply as a mixture of all rotations Q G SU(2). This situation can be 
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summed up with the channel 8^ defined by 

N/2 
j=0 

where Scj is the completely depolarizing channel on Mj and Ilj is the 
projection onto M.j. One can see immediately that S is in fact a condi- 
tional expectation channel that maps onto the algebra ©j(llHj ^C{Kj)). 



Thus, as noted in Theorem 5.1 , private states for S can be found using 



trace vectors, which in this case can be constructed on the summands 



of the direct sum in a manner analogous to Example 3^ 

6. Outlook 

We see two main potential outcomes of the present work. Firstly, it 
is clear even just from the examples we have discussed here that there 
are numerous conditional expectation channels of relevance in quantum 
information, though they have not been viewed from this perspective 
before. It should be possible to use the conditional expectation and 
trace vector machinery to construct other new and useful examples 
of private quantum channels. Secondly, this work raises the intriguing 
possibility that a much more extensive theory of private quantum chan- 
nels and private states could be developed. With few exceptions, the 
work on private channels appearing in the literature has focused pri- 
marily on specific instances and channels, rather than an overarching 
theory. We intend to continue these investigations elsewhere. 
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